Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9193D86/C67D176E9A5F11EA9F626B5EC4F9AE02/79C02FB0CC8511EC8D238672C4F9AE02.roa
File:                     79C02FB0CC8511EC8D238672C4F9AE02.roa (raw, json)
Hash identifier:          dKpKNCrURAsBv07U8aimKZSBpZKUHuEP819khAXBuFw=
Subject key identifier:   7F:2A:A6:5B:51:29:23:61:0D:2A:3B:F1:18:C8:EF:5A:49:55:FD:6C
Certificate issuer:       /CN=A9193D86/serialNumber=1C9BA2C5FEA8C034DA551FDADC62A53A7A02E5DB
Certificate serial:       08EE
Authority key identifier: 1C:9B:A2:C5:FE:A8:C0:34:DA:55:1F:DA:DC:62:A5:3A:7A:02:E5:DB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HJuixf6owDTaVR_a3GKlOnoC5ds.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9193D86/C67D176E9A5F11EA9F626B5EC4F9AE02/79C02FB0CC8511EC8D238672C4F9AE02.roa
Signing time:             Thu 10 Oct 2024 20:59:03 +0000
ROA not before:           Thu 10 Oct 2024 20:59:03 +0000
ROA not after:            Tue 30 Dec 2025 00:00:00 +0000
asID:                     136950
IP address blocks:        103.100.60.0/22 maxlen: 22
                          103.100.62.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9193D86/C67D176E9A5F11EA9F626B5EC4F9AE02/HJuixf6owDTaVR_a3GKlOnoC5ds.crl
                          rsync://rpki.apnic.net/member_repository/A9193D86/C67D176E9A5F11EA9F626B5EC4F9AE02/HJuixf6owDTaVR_a3GKlOnoC5ds.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HJuixf6owDTaVR_a3GKlOnoC5ds.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 19:45:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2286 (0x8ee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9193D86/serialNumber=1C9BA2C5FEA8C034DA551FDADC62A53A7A02E5DB
        Validity
            Not Before: Oct 10 20:59:03 2024 GMT
            Not After : Dec 30 00:00:00 2025 GMT
        Subject: CN=67084017-05e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:6a:ee:91:6c:fe:c6:08:4a:8d:b9:cd:dd:68:
                    58:e9:78:aa:61:e2:a1:61:fe:d7:e3:59:ee:95:fb:
                    99:af:79:fe:f1:e5:8d:fc:db:e5:ca:2c:e6:94:fe:
                    6c:fe:5c:a7:d1:03:6f:74:5f:5c:30:b2:c8:60:52:
                    f5:e1:d7:a8:7c:6f:dd:0f:a6:b9:30:08:54:39:23:
                    f5:a5:74:58:27:b8:5a:e8:c3:fd:97:19:12:62:3e:
                    b9:b3:ce:ee:cb:d6:ec:cd:a8:79:7e:e9:59:d7:c4:
                    b8:6b:31:93:71:da:fb:26:40:d1:fe:dd:e3:dc:7b:
                    b5:03:89:88:22:b4:c5:b9:f3:11:53:98:1b:92:fe:
                    52:a7:cb:78:7b:cf:bf:e6:a2:ca:29:3d:aa:34:4f:
                    a3:ad:c5:b6:ab:60:2b:5b:fb:88:fa:12:b9:1d:3f:
                    76:b6:b0:48:5d:b8:47:64:99:30:23:a8:bd:b8:06:
                    f0:ee:7f:2f:c0:db:33:1b:52:76:d2:23:10:37:52:
                    48:12:5a:86:7f:ec:cb:74:76:31:ec:d8:40:43:e8:
                    70:16:59:4d:1e:06:56:c8:fc:8e:d9:c2:cc:d2:db:
                    c2:49:0f:56:0a:bb:a5:2e:33:b5:d0:08:20:42:71:
                    01:79:7f:29:e5:6b:ff:76:e5:32:d2:c2:25:df:e2:
                    ee:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:2A:A6:5B:51:29:23:61:0D:2A:3B:F1:18:C8:EF:5A:49:55:FD:6C
            X509v3 Authority Key Identifier:
                keyid:1C:9B:A2:C5:FE:A8:C0:34:DA:55:1F:DA:DC:62:A5:3A:7A:02:E5:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9193D86/C67D176E9A5F11EA9F626B5EC4F9AE02/HJuixf6owDTaVR_a3GKlOnoC5ds.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HJuixf6owDTaVR_a3GKlOnoC5ds.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193D86/C67D176E9A5F11EA9F626B5EC4F9AE02/79C02FB0CC8511EC8D238672C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.100.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8a:01:ca:48:06:18:b8:ea:44:fc:99:9d:6c:99:3f:e2:b5:e6:
         e6:f1:eb:90:ad:e1:bf:64:7c:a6:91:69:1e:5a:b6:b8:fb:9d:
         0a:8d:8d:2a:a0:bc:4a:a4:b4:36:99:10:51:db:5d:32:19:62:
         9b:cf:8f:a9:9a:ed:69:8e:a6:1d:7a:9e:ac:a0:3f:27:18:73:
         81:b5:e3:ad:9d:8f:a8:20:a8:55:95:bd:5f:4e:37:2a:f4:77:
         80:15:70:ab:c6:f5:c6:d2:15:0d:31:91:1d:32:d5:e1:a1:49:
         4d:a7:c0:4e:4a:cb:3e:ba:53:3c:72:cd:af:08:20:14:5e:0a:
         1e:11:e0:5b:d1:9d:56:a3:54:b2:2c:51:ca:67:bf:72:1a:7c:
         58:eb:d4:4e:72:af:46:14:91:ba:14:25:a9:50:a6:6a:15:72:
         f7:8c:9f:0d:1c:17:c7:41:2c:ef:f5:9b:53:36:5f:01:69:c1:
         e9:70:57:90:18:70:d0:dc:81:ee:7c:5b:07:23:f6:eb:3e:bd:
         b1:be:6b:6b:3d:08:c7:f8:0c:b7:0f:63:15:04:56:b2:df:f0:
         c1:a3:9c:81:b0:42:d3:cd:b3:1e:d6:e9:25:e9:ad:75:88:c2:
         49:16:6b:07:36:13:37:8a:bb:f2:ef:ff:b4:14:47:6a:c1:24:
         b8:33:be:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 21:34:55 2024 by rpki-client on console-ams.rpki-client.org